Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/88b706beba0c01031c38d31b462e89bd79b21dd0.roa
File:                     88b706beba0c01031c38d31b462e89bd79b21dd0.roa (raw, json)
Hash identifier:          apVQNSjbisz90ww3WaoC5/3JazVJJ0j1Th6hxkd+h50=
Subject key identifier:   F3:3A:46:30:2C:52:BC:7E:74:D8:EA:14:AA:6A:B2:3C:87:61:28:30
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A26AC
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/88b706beba0c01031c38d31b462e89bd79b21dd0.roa
Signing time:             Wed 24 Mar 2021 14:43:21 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        2001:1278:d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665260 (0xa26ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=88b706beba0c01031c38d31b462e89bd79b21dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:68:df:05:3c:40:31:7b:28:38:be:0b:ea:
                    90:44:3c:63:5e:70:38:33:0b:dc:c1:51:97:40:5e:
                    41:50:1b:5f:d0:33:73:16:78:e0:2d:cb:ed:d5:51:
                    ac:c5:48:86:33:96:25:0a:f4:c1:9c:88:e0:c6:74:
                    9c:8a:08:a8:98:ff:f7:b9:bd:8d:84:1b:1b:90:31:
                    7a:12:b2:8a:ee:a1:ed:d5:54:8e:16:92:e8:d2:f9:
                    2f:09:b8:08:e0:40:34:cf:b8:e1:ca:14:54:35:3b:
                    13:9c:59:35:82:d9:17:05:93:0f:77:f3:83:58:30:
                    f3:0f:cc:d2:05:8c:cb:f1:9e:7d:6d:35:c6:b7:7f:
                    f0:e0:94:ef:d3:6e:55:45:4b:4c:d8:94:62:34:bc:
                    82:f2:fa:3a:1f:09:c7:b2:bb:3f:a6:7d:27:76:37:
                    25:00:40:4b:61:19:1e:8f:5b:2f:4f:55:c7:5f:15:
                    b1:2e:9b:50:d1:a7:ac:2e:c5:88:52:7b:c8:f7:46:
                    3a:92:e4:58:36:10:86:cd:42:c6:d8:31:5d:36:91:
                    5c:5b:c1:4e:7b:c7:30:12:28:b1:b3:75:fb:60:f9:
                    da:7e:ca:ff:d9:a7:9f:f3:3d:82:5d:f0:a9:c2:3a:
                    21:d5:5a:f7:1b:31:ff:f8:c8:87:5e:7f:02:ec:85:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3A:46:30:2C:52:BC:7E:74:D8:EA:14:AA:6A:B2:3C:87:61:28:30
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/88b706beba0c01031c38d31b462e89bd79b21dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:88:81:cb:d6:c6:1a:43:96:c3:ee:b3:46:21:74:14:cc:f7:
         18:6b:cc:8f:1e:24:37:6a:44:93:61:38:3a:2f:0a:82:de:c1:
         41:43:4f:1a:3e:ce:23:40:6b:63:f2:a8:8e:cb:9b:19:e5:81:
         4a:13:08:8d:1c:63:3e:94:29:9d:71:a5:62:b1:83:b1:2a:9c:
         10:25:e7:23:b7:be:68:f5:2b:0e:91:5a:a6:50:32:e4:09:02:
         2a:4a:73:01:8b:ed:cd:b1:68:88:6a:b0:97:5b:8c:22:2e:50:
         5b:2a:ad:7d:99:83:66:eb:0c:5f:5c:5d:66:1e:db:58:67:56:
         8c:a7:f2:a3:bd:49:c9:77:10:23:cb:a2:7a:c2:07:27:16:4a:
         1c:5a:0d:c2:28:27:31:c4:3a:21:f8:fc:8c:22:90:7d:6f:04:
         bd:fc:5f:70:55:97:c6:56:6a:8a:ff:9f:09:b7:66:f4:3b:8f:
         b0:43:4c:11:f1:8a:56:24:77:4e:de:cb:7d:e1:b3:70:c1:08:
         b5:7b:be:aa:61:99:5c:7b:4b:25:64:d6:31:50:98:b3:9a:8b:
         11:fa:63:50:04:6e:31:41:a0:ec:e1:a5:34:f4:04:9b:38:19:
         4f:0d:de:96:cc:24:24:7a:c0:f1:da:0c:39:32:32:91:d5:9d:
         c6:26:5a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----